DOJ-02046-Hillary-R

ALL INFORlLll.'l'ION CONT AIHED HEREHI IS UHCL.ASSEIEC DATE 1 0-23-:;:Ql 7 BY J37 J 8 5T94 USICC-

F0-)40 (Rev. 4-1 1--0J) b3 File Number J------.1 OCJ\ b7E

field Qfficc Acquiring Evidence _W_-F-V______

Serial # of OrlginaClng Document ___...,l""o_C)_.______

Datt Received

(Address)

(City iind St:lle) b6 By b7C

To Be Returned 0 Yes fl)No Receipt Given 0 Yes ~ No Grand Jwy Material - Disseminate Only Pursuant to Rule 6 (e) federal Rules of Criminal Procedure 0 Yes · ~No federal Tax.payer Information (FTI) 0 Yes (lt

Reference:

Description: D Original notes re interview of

HRC-10161 ALL fEI IHFO&Lii.'JIOH CCH'J'AINEC HERZIN IS tn~Ct.ASSIFIED UNCLASSIPIED//Ft:Jr!l5 DATE 01-12-2017 BY J76,ll8'1'80 NSICG

U.S.· Department of Justice Federal Bureau of Investigation Washington, D.C. 20535-0001

Date: 10 May 2016

To: Priya Aiyer Acting General Counsel U.S. Department of the Treasury

From: Peter Strzo10-- Sect ion Chief Counterespionage Section

Subject: supplemental Classification Review and Determination Request

{U//li!Q0&) In July 2015, the FBI received a Section 811 referral from the Inspector General for the Intelligence Community (ICIG) regarding the'possible compromise· of classified national security . information.

{U//~) The potential compromise was identified when, as part of a Freedom of Information Act {FOIA) request, the U.S. Department of State (DoS) and the ICIG reviewed electronic mail {email) communications from private email accounts previously used by a former Secretary of State during her tenure at Dos. An initial review of this material identified emails containing national security information later determined by the us Intelligence Community (USIC) to be classified up to the Top Secret/Sensitive Compartmented Information level.

(U//P9001 The FBI respectfully requests the U.S. Department of the Treasury (Treasury) conduct an official classification review and determination of the related documents contained on the accompanying DVD. This request is in addition to previous Classification Review and Requests submitted to your agency in October 2015, January 2016. While this request is separate from the previous requests, it should be responded to in similar manner.

UNCLASSIFIED//~

This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your. agency; it and its contents are not to be distributed outside your agency.· HRC-10162 UNCLASSIFIED//Pe~

{U//~) The FBI understands you may also be reviewing materials as part of ongoing FOIA lawsuits involving some of these documents . This matter should remain separate from the FOIA matter·(s) and information from this request should not be shared or co-mingled with the FOIA matter(s) to ensure the FBI's investigation is not compromised or adversely affected.

(U// FGUO) The FB I a l so understands that DOS may have previously received simil ar, separate requests from other entities for an official c l assification review and determination for some or .all of the documents contained on the enclosed DVD. In order to ensure consistency, the FBI reque'sts DOS de- conflict its response to this FBI request with any previous classification determination responses related to these documents, and to provide the FBI the same classification determinations. The FBI requests DOS to . provide as soon as possible any previously rendered official clas.sif ication determinations of documents related to this matter, to include any classification determinatio~s of documents related to the @clintonema i l .com domain that are not contained on the attached DVD. The FBI requests DOS to provide classification determination responses to the FBI on a rolling basis as they become available.

(U/ /~) ·similar to the FBI' s previous requests, the enclosed DVDs contains a ReadMe.docx file, which provides an explanation of the files contained on the DVD. The DVDs also contain a Microsoft Excel spreadsheet titled Classification Review Response Tracker to assist your agency with tracking and responding to this c l assification review and determination request. The documents for review are listed i n the FileList.xl sx spreadsheet and are contained in the Items folder. The Items folder is further explained in the aforementioned ReadMe.docx file. I n the event DOS is aware of any equities belonging to other US Government agencies contained in documents provided as part of this request, the FB I requests DOS to identify those other us Government agencies in the "Notes" section of the encloied spreadsheet.

(U//peee) The FBI may contact you in. the future to ask you to prioritize the review of certain items provided as part of this request .

(U/ /~) · You are requested not to disclose the existence of this inquiry or the contents of the provided media, other than as necessary for compliance; disclo~ure may jeopardize the confidential nature of .the FB I 's investigation.

UNCLASSIFIED//~

This document contains neither recommendations nor conclusions of the FBI. It is the property·of the FBI and is loaned to your agency; it and its contents are not to be distributed outside your agency. · HRC-10163 1J'NCLASSIFIBD / ~

(U/ / -lV!0ue-} Please direct a ll inquiries rerarding this request to Special Agent I latl _ bG b7C

Section ••

1J'NCLASSIPIBD // ~

This document contains neither recommendations nor conclusions of the FBI. It is t h e property of the FBI and is loaned to your agency; it and its contents are not to be distributed outs i de your agency. HRC-10164 FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 33 Page 2 - Referral/Consult; Page 3 - Referral/Consult; Page 4 - Referral/Consult; Page 5 - Referral/Consult; Page 6 - Referral/Consult; Page 7 - Referral/Consult; Page 8 - Referral/Consult; Page 9 - Referral/Consult; Page 10 - Referral/Consult; Page 11 - Referral/Consult; Page 12 - Referral/Consult; Page 13 - Referral/Consult; Page 14 - Referral/Consult; Page 15 - Referral/Consult; Page 16 - Referral/Consult; Page 17 - Referral/Consult; Page 18 - Referral/Consult; Page 19 - Referral/Consult; Page 20 - Referral/Consult; Page 21 - Referral/Consult; Page 22 - Referral/Consult; Page 23 - Referral/Consult; Page 24 - Referral/Consult; Page 25 - Referral/Consult; Page 26 - Referral/Consult; Page 27 - Referral/Consult; Page 28 - Referral/Consult; Page 29 - Referral/Consult; Page 30 - Referral/Consult; Page 31 - Referral/Consult; Page 32 - Referral/Consult; Page 33 - Referral/Consult; Page 34 - Referral/Consult; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx DECLASSEIED BY: HSICG C.87W44B73 b3 OH 01-25-2018 --~~~~~~--~CYBER Serial 1 ---=-- OF .;:,;~~8-_--~-Q-RO~J b ?E FD- I 057 (Rev. 5-8-10) ·~~;.,-., ~.,...tC»"n·o(·.a«t~·~'li\.I.,...< N S.\I!" ,;;r, '\,"~' :>",,.. ,.o:·~~i" • • ••r: '•·.1 'I "~*'~ti•·:- ~~f,:(."

FEDERAL BUREAU OF INVESTIGATION Electronic Communication

Title: (U) Subfile Opening Document Date: 02/12/2 16

From: CYBER DM-TOU Contact: b3 b6 b7C Approved By:I I b7E

Drafted By: I j ~:u•, -----1 Case ID #:I ~CYB E~ )(.; 1-N't'i MIDYEAR EXAM; MISHANDLING OF CLASSIFIED; UNKNOWN SUBJECT OR COUNTRY; SENSITIVE INVESTIGATIVE MATTER (SIM)

Synopsis: To open CYBER subfile

Details:

Writer requests that a subfile be opened titled "CYBER", to store all Cyber investigative analysis . ••

H C-10198 I DECLASSEIED BY: HSICG C.87W44B73 b3 OH 01-25-2018 --~~~~~~--~CYB~R Serial 14 ----···- ---·-- b7E FD-1057(Rev. 5-8-10) !.~. ·~.~~J!~~~-~ All ~.ir :.·~- 'l••t- i:.. ~, ·;~1119r. "·· > I ~/-NOPOMf" .,,.:1111e t.;1 ,.,,•c-.:.1.~:· "Y~!,..~ ·--- FEDERAL BUREAU OF INVESTIGATION Electronic Communication

Title: (U//~) lA Document forl Date: 03/24/2 16 b7E Searches ...._~~~~---

From: CH I CAGO CG-CY-1 Contact: b3 b6 b7C b7E

Drafted By:~I~~~~~~~--'

Case ID #: I.... ------~CYBEW) )(;AW) MIDYEAR EXAM; MISHANDLING OF CLASSIFIED; UNKNOWN SUBJECT OR COUNTRY; SENSITIVE INVESTIGATIVE MATTER (SIM)

b7E Synopsis: (U//F'Otffi.1 Submits lA document to the file for~I~~~~~• searches conducted in this investigation.

b3 Serial 13 Reference:~l~~~~~~--'~CYBER b7E

Enclosure(s): Enclosed are the following items: 1. (U)I lsearch documentation. b7E

Details:

(U/1"1"eee-) This communication submits to the file the lA document that is associated with the above reference serial (13) in the CYBER sub file.

H C-10199 I ...._~~~~~~---'~ CYBER Serial 14 b3 b7E

~ /NO!'eftft Title: (U//"'.POUE)-1 lA Docume.nt fo~ ! searches b3 Re: ~'~~~~~~-'~ CYB ER, 03/24 /_2_0_1_6~~~__, b7E ••

~/MOP91Ql

H C-10200 I ALL INFORlr.A1'IOH CONTAHTED HEREIN I S UNCLASSEIEC tr.NCLASSIFI ED//~ DATE 01- 25-:;:018 .3Y C87i'l44B73 ~ISICG ~nysica l lA/ lC Cover Sheet for Serial Expor t

Created Prom: b3 b7E Serial 14 Package: lAlO Stored Location: None Summary: (U//~ ) Documents provide b b6 for searc hes b7C i s b7E

Acquired By: Acquired OD: 2016-03 - 24 Attachment: (U) I Isea rch documen t ation.

H C-10201 I FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 6 Page 1 - Referral/Consult; Page 2 - Referral/Consult; Page 5 - Referral/Consult; Page 6 - Referral/Consult; Page 7 - Referral/Consult; Page 8 - Referral/Consult; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx DECLASSEIED BY: HSICG C.87W44B73 b3 OH 01-25-2018 1-----.....- ---·--·-~b7E FD-IOS7 (Rev. S-8-10) ~~. ·;,~~. ~!-!!:~!~ J l\t !.. ;;· :.::oo -~.,:> !>o&~ ·,'\.'·fY.ii: b)·,. ~//N6PORN • <:Pr.{•1:;' ttl ¥:.·-ll·I)'• S•~ .. ~· '-·-·---...... ~ ...- ...... FEDERAL BUREAU OF INVESTIGATION Electronic Communication

Title: (U//~ Submit lA Date: 05/18/2 16

From: WASHINGTON FIELD WF-CI13 Contact: b3 b6 b7C Approved By:._I______. b7E

Drafted BY~.______] !U', Case ID #: I... ______~oc~ ! ~//..f+F) MIDYEAR EXAM; MISHANDLING OF CLASSIFIED; UNKNOWN SUBJECT OR COUNTRY; SENSITIVE INVESTIGATIVE MATTER (SIM)

Synopsis: (U//~ To submit to the file a lA associated with seria 62 of the sub OCA file.

b3 Serial 62 Reference: l... ______,~OCA b7E

Enclosure(s): Enclosed are the following items: 1. (U/ /POl-:10) LHM submitted to USSS on 5/17 /2016

Details:

(U/ ~89~ This communication submits to the file a lA associated with Serial 62 of the captioned case and subfile . ••

~/H0PeRN

H C-10204 I ALL FBI nrroru.!A1'IOH COMT.AINEI: HEREIN IS UUCLASSI!.'IE"C UNCLASSIFIED/ /1"0$ DATE 01- 2~ - 2 018 3Y C87~44B73 AC G ~nysical lA/lC Cover Sheet for Serial Export

Created Prom: b3 b7E Serial 64 Package: 1A40 Stored Location: None Summary: (U//P'eYO.) LHM submitted to USSS on 5/17/2016 Acquired By: b6 I b7C Acquired On: 2016-05-17 Attachment: (U//FOt10} LHM submitted to USSS on 5/17/2016

H C-10205 I FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 35 Page 2 - Referral/Consult; Page 3 - Referral/Consult; Page 4 - Referral/Consult; Page 5 - Referral/Consult; Page 6 - Referral/Consult; Page 7 - Referral/Consult; Page 8 - Referral/Consult; Page 9 - Referral/Consult; Page 10 - Referral/Consult; Page 11 - Referral/Consult; Page 12 - Referral/Consult; Page 13 - Referral/Consult; Page 14 - Referral/Consult; Page 15 - Referral/Consult; Page 16 - Referral/Consult; Page 17 - Referral/Consult; Page 18 - Referral/Consult; Page 19 - Referral/Consult; Page 20 - Referral/Consult; Page 21 - Referral/Consult; Page 22 - Referral/Consult; Page 23 - Referral/Consult; Page 24 - Referral/Consult; Page 25 - Referral/Consult; Page 26 - Referral/Consult; Page 27 - Referral/Consult; Page 28 - Referral/Consult; Page 29 - Referral/Consult; Page 30 - Referral/Consult; Page 31 - Referral/Consult; Page 32 - Referral/Consult; Page 33 - Referral/Consult; Page 34 - Referral/Consult; Page 35 - Referral/Consult; Page 36 - Referral/Consult; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 10 Page 2 - Referral/Consult; Page 3 - Referral/Consult; Page 4 - Referral/Consult; Page 5 - Referral/Consult; Page 6 - Referral/Consult; Page 7 - Referral/Consult; Page 8 - Referral/Consult; Page 9 - Referral/Consult; Page 10 - Referral/Consult; Page 11 - Referral/Consult; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx DECLASSEIED BY: HSICG C.87W44B73 OH 02-12-2018 b3 ------~CYBER Serial 41 b7E 0FFICJ~L !!'ECORD . rn-1057(Rev. 5-8-10) ::.;....:.• .,•• : ;;.1t: : ..1,:<:"· ·,.~ ... 1'!:::.1:...,::s.:•11: • ,;. ~r,1":1•1. •.. i; " •••••, ~4',;: ,.,,. ·i.... I.)' " • ~/NO!OM ...-: ! ;.~ :e, ·:;'1.• >:!I~;,. FEDERAL BUREAU OF INVESTIGATION Electronic Communication

Title: (U//~o~g~ Case Support Request Date: 11./09/2016

From: CYBER Contact: b3 b6 b7C Approved By:~I~~~~~~~~~.... b7E

Drafted By:~I~~~~~~~~~~~•

Case ID # : ._I______,kYBER 9(1 lf\Hi.:J MIDYEAR EXAM; MISHANDLING OF CLASSIFIED; UNKNOWN SUBJECT OR COUNTRY; SENSITIVE INVESTIGATIVE MATTER (SIM)

This info.:::mat.:..on j_s the property of t~e ~RI and rr.ay be dist:-i bu led to state, tribal, or local govcrnrae~t law enforcement officials wi:h a need-to-knew. Further distributior. w.'..thout c'BI authorizaLi or.. is prohibited. Precautior.s shou id be lakeP. to ensure !.his i.nformat.1 on is s:::ored and/or destroyed in a manner that prucl~des unauthorized access.

Synopsis: (U//~) WFO/CI-13 requests intrusion analysis of the identified

Detai1s:

* Indicates required information.

HRC-10255 b3 ..._~~~~~~--'~CYBER Serial 41 b7E

~//MePeRN Title: (U/ct'fflt2l Case Support Request b3 Re: ._I______.~CYBER, 11/09/2016 b7E

b6 b7C ,phone #: i:1 *Request POC ., ]E-mail Address:

IU'1 ! ; I~ Service Requested

2.1 *Describe your goal or what you want this support to provide, e.g., Review media provided for evidence list any information or questions :.of intrusion. you wish to specifically answer as a; result of this review.

2.2 *Specify any particular service l or analysis you would like N/A performed.

/~ Evidence or Materiai Format

3.1 *If any material to be analyzed is marked as or suspected to be i Material is potentially up to classified, provide the ~//.HOPef':r~. classification level. Where ' suspected only, please explain.

~//NO~

HRC-10256 b3 ------....~CYBER Serial 41 b7E

Title: (U//~) Case Support Request Re: ______kYBER, 11/09/2016 b3 b7E

3.2 *Provide a complete list of evidence or material available for this review (e.g. hard drives and . Image of one hard drive from a OS, portable media, tablet PCs, log files, malware). Please indicate if ]laptop computer. \ additional material is anticipated throughout the course of the review.;

--·-·· -- .. ___ ..,.,.-- .. --·· . ··--··-··· ... -- ·-·-·-· ·-· .... ·-·· ...... ·- ...... ··-·-·--' 3.3 *Provide any specific handling or safeguards applicable to any : Media is from a Sensitive material in this review. '.Investigative Matter (SIM) involving :a high level political figure. !wFO/CI-13 is required to keep a list By default, contractor(s) treat all ;of all personnel with knowledge of information as Law Enforcement ithis investigation and, therefore, Sensitive (LES). irequests a list of CyD personnel who I ]work on this analysis.

-·--··--· .. ··---~···· "-········· ··-··· ····-········-·...... ·-···· ..•... --···--··. ··-··--·· - .... !_...•.. tU'i .~-·-J~I tH!f... .~~~~--~~-~~=~~~~ 4.1 Case Title i MIDYEAR EXAM 4·~-2-,.;·5-hort--case' -su~-ary"/(;ve~'~"ie~-·- ·:--eiease contact case agent. . . . . --·-·- .. _·---·-- ·-· -·· .. ·-···-···-··-·-. . ·- - .. . .. -- --·.. . -- -··. . 4.3 List any associated FBI cases.

4.4 *List any previous attempts or None. e£forts to analyze this evidence.

HRC-10257 b3 ------~CYBER Serial 41 b7E

~//H9P0ft!t

Title: (U//FBHO) Case Support Request

Re: ._I______.kYBER, 11/09/2016 b3 b7E

4.5 *List any timing requirements such as expiration of search Please contact case agent. warrants, deadlines set by DOJ, upcoming indictments, and so forth.

4.6 *Of the materials to be provided, specify the processing priority (i.e. specific drives that Single hard drive. are more important than others and need analysis first}.

4.7 *Are there limitations in the search warrant that restrict what Please contact case agent for a analysts can review? If so, please ~copy of the warrant. list search criteria .

...... -...- ...... -_.... _...... , ...-- ·--·····-·- --···· .. ~--~ ··•··· ...... -· ~··---· ...... ,. . ·-···· ·~ .... ····-· .. 5.2 Headquarters Program Manager ~ DAD Peter Strzok b6 F!-~~~1~:~~~~-~:~~~~~-~\--~L~:t~~~ J-~:~ I~A""1------. b7C

6. (Portion Mark)Additional Information: Use the section below to expand upon the answers provided above. Please identify the topic you are addressing when providing the additional details below.

~/l19P9Mf"

HRC-10258 b3 .._~~~~~~__,~CYBER Serial 41 b7E ~/FIOBOM

Title: (U/ /~) Case Support Request

Re: ._I______.... ~CYBER, 11/09/2016 b3 b7E

••

HRC-10259 DECLASSEIED BY: HSICG C.87W44B73 OH 02-12-2018 ______.... ~CYBER Serial 42 b3 r·~----· · --·- ·-----· · · · b7E 0FFIC.!A'-. R"CORD . FD-10.~6 (Rev 10-16-2009) :t'>:.~ .·: ~lll"' ~·{,.;···-- n.t.;, "';:o:.• : .. :: , ....: . Ill r-:•".n.·~· ...•.,.; ...... v:-·':1>·; t;." ~··~ ....., .-;;;,. -".. "":... ":"'~·· FEDERAL BUREAU OF INVESTIGATION Import Form

Form Type: DEL-REX Date: 01/04/2017

Title:(U//~ Cyber Division TAU Technical Analysis Report

b3 Approved By: SSA~I______. b6 b7C Drafted By:~I______. b7E

Case ID # l.______.~CYBER ~//MP) MIDYEAR EXAM; MISHANDLING OF CLASSIFIED; IU) UNKNOWN SUBJECT OR COUNTRY; SENSITIVE INVESTIGATIVE MATTER (SIM)

Synopsis: (U//~ Analysis of computer intrusion or malware infection on a laptop hard drive belonging to Anthony Weiner .

••

HRC-10260 DECLASSEIED BY: HSICG C.87W44B73 OH 02-12-2018

~fl

:'U\ ' ' ~//N'P) The captioned investigation is highly sensitive and considered a prohibited investigation. Additionally, the investigation is designated a SIM and has an exemption for uploading approved by AD Randall ColemanI ISerial 1). b3 b7E ;U) ~fW¥.) To provide an electronic record, this document will serve as a placeholder within Sentinel so a document serial number can be assigned. The original document and any associated lA envelopes have been manually drafted and approved. The original approved and serialized documents are stored in a p~ case file. This case file is secured in a certified SCIF, located at FBI Headquarters, RoonL__Jand available for inspection upon request. Requests for b7E inspection will need to be approved by the Assistant Director of Counterintelligence Division.

~//NOF0RP~

HRC-10261 ALL !BI INIOR.MA1'ION COHTA.UlED HEREIH IS UNCL.AS SEIEC ..______Serial 103 b3 DATE 02-12-:;:QlS .3Y C87iV44B73 l.JSIC.G _.~ 302 b7E

f0-l057 (Rev . 5-8-IO)

FEDERAL BUREAU OF INVESTIGATION Electronic Communication

TitlQ: (U//Tetffii To submit an FD-340 Date: 02/ 16/2017

From: WASHINGTON FIELD WF - CI13 Contact: b3 b6 b7C Approved By: A/SSA ~'~~~~~~~~~~--' b7E

Drafted By : ~'~~~~~~~- \U)

Case ID #~.... ------~302 WIM'i MIDYEAR EXAM; MISHAN DLING OF CLASSI FIED; UNKNOWN SUBJECT OR COUNTRY; SENSITIVE I NV ESTIGATIVE MATTER (SIM}

Synopsis: ( U//~ This electronic commun ication (EC) is to document the s ubmission of an FD- 340 t o f i le.

b3 Serial 102 Reference: ~l~~~~~~~~~302 b7E

Enclosure(s): Enclosed are the following items : 1. (U//~ Original notes re intervie w of Huma Abedin on 6 January 2017 . Associated Documents - Non -Disclosure Agreeme nt, Emails displayed, and Notes

Details:

(U//~ Thi s electronic communication (EC) i s to document the submi ssion o f an FD-340 t o file .

•• ~/N0F8fttf

HRC-10262 -302 Serial 103 b3 L-~~~~~~~ b7E

Title: (U/ / f'ffif&l To submit an FD-340 Re : ~ 302, 02/16/2017 b3 b7E

~/NOBVRN

HRC-10263 ALL !BI INIOR.MA1'ION COHTA.UlED HEREIH IS UNCL.AS SEIEC DATE 02-12-:;:QlS .3Y C87iV44B73 l.JSIC.G

UNCLASSIF IED//'P'et10'" Physical lA/lC Cover Sheet for Seri al Export

Created Prom: b3 b6 Serial 103 b7C Package: 1A85 b7E Stored Location: None Summary: (U//P060) Original notes re interview of Huma Abedin on 6 January 2017. Acquired By: Acquired On: 2017-01-06 Acquired Prom: (U/ /rOtJ07 Huma Abedin Attacbme11t: (U//~otJe+ Original notes re interview of Huma Abedin on 6 January 2017. Associated Documents - Non Disclosure Agreement, Emails displayed, and Notes

HRC-10264 FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) 27 Page 1 - b7E; Page 2 - b7E; Page 3 - b7E; Page 4 - b7E; Page 5 - b7E; Page 7 - b7E; Page 8 - b7E; Page 9 - b7E; Page 10 - b7E; Page 11 - b7E; Page 12 - b6; b7C; b7E; Page 13 - b7E; Page 14 - b7E; Page 15 - b7E; Page 16 - b7E; Page 17 - b7E; Page 18 - b7E; Page 19 - b7E; Page 20 - b7E; Page 21 - b7E; Page 22 - b7E; Page 23 - b7E; Page 24 - b7E; Page 25 - b7E; Page 26 - b7E; Page 27 - b7E; Page 28 - b7E; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 325 Page 1 - b3; b6; b7C; b7E; Page 2 - Duplicate; Page 3 - Duplicate; Page 4 - Duplicate; Page 5 - Duplicate; Page 6 - Duplicate; Page 7 - Duplicate; Page 8 - Duplicate; Page 9 - Duplicate; Page 10 - Duplicate; Page 11 - Duplicate; Page 12 - Duplicate; Page 13 - Duplicate; Page 14 - Duplicate; Page 15 - Duplicate; Page 16 - Duplicate; Page 17 - Duplicate; Page 18 - Duplicate; Page 19 - Duplicate; Page 20 - Duplicate; Page 21 - Duplicate; Page 22 - Duplicate; Page 23 - Duplicate; Page 24 - Duplicate; Page 25 - Duplicate; Page 26 - Duplicate; Page 27 - Duplicate; Page 28 - Duplicate; Page 29 - Duplicate; Page 30 - Duplicate; Page 31 - Duplicate; Page 32 - Duplicate; Page 33 - Duplicate; Page 34 - Duplicate; Page 35 - Duplicate; Page 36 - Duplicate; Page 37 - Duplicate; Page 38 - Duplicate; Page 39 - Duplicate; Page 40 - Duplicate; Page 41 - Duplicate; Page 42 - Duplicate; Page 43 - Duplicate; Page 44 - Duplicate; Page 45 - Duplicate; Page 46 - Duplicate; Page 47 - Duplicate; Page 48 - Duplicate; Page 49 - Duplicate; Page 50 - Duplicate; Page 51 - Duplicate; Page 52 - Duplicate; Page 53 - Duplicate; Page 54 - Duplicate; Page 55 - Duplicate; Page 56 - Duplicate; Page 57 - Duplicate; Page 58 - Duplicate; Page 59 - Duplicate; Page 60 - Duplicate; Page 61 - Duplicate; Page 62 - Duplicate; Page 63 - Duplicate; Page 64 - Duplicate; Page 65 - Duplicate; Page 66 - Duplicate; Page 67 - Duplicate; Page 68 - Duplicate; Page 69 - Duplicate; Page 70 - Duplicate; Page 71 - Duplicate; Page 72 - Duplicate; Page 73 - Duplicate; Page 74 - Duplicate; Page 75 - Duplicate; Page 76 - Duplicate; Page 77 - Duplicate; Page 78 - Duplicate; Page 79 - Duplicate; Page 80 - Duplicate; Page 81 - Duplicate; Page 82 - Duplicate; Page 83 - Duplicate; Page 84 - Duplicate; Page 85 - Duplicate; Page 86 - Duplicate; Page 87 - Duplicate; Page 88 - Duplicate; Page 89 - Duplicate; Page 90 - Duplicate; Page 91 - Duplicate; Page 92 - Duplicate; Page 93 - Duplicate; Page 94 - Duplicate; Page 95 - Duplicate; Page 96 - Duplicate; Page 97 - Duplicate; Page 98 - Duplicate; Page 99 - Duplicate; Page 100 - Duplicate; Page 101 - Duplicate; Page 102 - Duplicate; Page 103 - Duplicate; Page 104 - Duplicate; Page 105 - Duplicate; Page 106 - Duplicate; Page 107 - Duplicate; Page 108 - Duplicate; Page 109 - Duplicate; Page 110 - Duplicate; Page 111 - Duplicate; Page 112 - Duplicate; Page 113 - Duplicate; Page 114 - Duplicate; Page 115 - Duplicate; Page 116 - Duplicate; Page 117 - Duplicate; Page 118 - Duplicate; Page 119 - Duplicate; Page 120 - Duplicate; Page 121 - Duplicate; Page 122 - Duplicate; Page 123 - Duplicate; Page 124 - Duplicate; Page 125 - Duplicate; Page 126 - Duplicate; Page 127 - Duplicate; Page 128 - Duplicate; Page 129 - Duplicate; Page 130 - Duplicate; Page 131 - Duplicate; Page 132 - Duplicate; Page 133 - Duplicate; Page 134 - Duplicate; Page 135 - Duplicate; Page 136 - Duplicate; Page 137 - Duplicate; Page 138 - Duplicate; Page 139 - Duplicate; Page 140 - Duplicate; Page 141 - Duplicate; Page 142 - Duplicate; Page 143 - Duplicate; Page 144 - Duplicate; Page 145 - Duplicate; Page 146 - Duplicate; Page 147 - Duplicate; Page 148 - Duplicate; Page 149 - Duplicate; Page 150 - Duplicate; Page 151 - Duplicate; Page 152 - Duplicate; Page 153 - Duplicate; Page 154 - Duplicate; Page 155 - Duplicate; Page 156 - Duplicate; Page 157 - Duplicate; Page 158 - Duplicate; Page 159 - Duplicate; Page 160 - Duplicate; Page 161 - Duplicate; Page 162 - Duplicate; Page 163 - Duplicate; Page 164 - Duplicate; Page 165 - Duplicate; Page 166 - Duplicate; Page 167 - Duplicate; Page 168 - Duplicate; Page 169 - Duplicate; Page 170 - Duplicate; Page 171 - Duplicate; Page 172 - Duplicate; Page 173 - Duplicate; Page 174 - Duplicate; Page 175 - Duplicate; Page 176 - Duplicate; Page 177 - Duplicate; Page 178 - Duplicate; Page 179 - Duplicate; Page 180 - Duplicate; Page 181 - Duplicate; Page 182 - Duplicate; Page 183 - Duplicate; Page 184 - Duplicate; Page 185 - Duplicate; Page 186 - Duplicate; Page 187 - Duplicate; Page 188 - Duplicate; Page 189 - Duplicate; Page 190 - Duplicate; Page 191 - Duplicate; Page 192 - Duplicate; Page 193 - Duplicate; Page 194 - Duplicate; Page 195 - Duplicate; Page 196 - Duplicate; Page 197 - Duplicate; Page 198 - Duplicate; Page 199 - Duplicate; Page 200 - Duplicate; Page 201 - Duplicate; Page 202 - Duplicate; Page 203 - Duplicate; Page 204 - Duplicate; Page 205 - Duplicate; Page 206 - Duplicate; Page 207 - Duplicate; Page 208 - Duplicate; Page 209 - Duplicate; Page 210 - Duplicate; Page 211 - Duplicate; Page 212 - Duplicate; Page 213 - Duplicate; Page 214 - Duplicate; Page 215 - Duplicate; Page 216 - Duplicate; Page 217 - Duplicate; Page 218 - Duplicate; Page 219 - Duplicate; Page 220 - Duplicate; Page 221 - Duplicate; Page 222 - Duplicate; Page 223 - Duplicate; Page 224 - Duplicate; Page 225 - Duplicate; Page 226 - Duplicate; Page 227 - Duplicate; Page 228 - Duplicate; Page 229 - Duplicate; Page 230 - Duplicate; Page 231 - Duplicate; Page 232 - Duplicate; Page 233 - Duplicate; Page 234 - Duplicate; Page 235 - Duplicate; Page 236 - Duplicate; Page 237 - Duplicate; Page 238 - Duplicate; Page 239 - Duplicate; Page 240 - Duplicate; Page 241 - Duplicate; Page 242 - Duplicate; Page 243 - Duplicate; Page 244 - Duplicate; Page 245 - Duplicate; Page 246 - Duplicate; Page 247 - Duplicate; Page 248 - Duplicate; Page 249 - Duplicate; Page 250 - Duplicate; Page 251 - Duplicate; Page 252 - Duplicate; Page 253 - Duplicate; Page 254 - Duplicate; Page 255 - Duplicate; Page 256 - Duplicate; Page 257 - Duplicate; Page 258 - Duplicate; Page 259 - Duplicate; Page 260 - Duplicate; Page 261 - Duplicate; Page 262 - Duplicate; Page 263 - Duplicate; Page 264 - Duplicate; Page 265 - Duplicate; Page 266 - Duplicate; Page 267 - Duplicate; Page 268 - Duplicate; Page 269 - Duplicate; Page 270 - Duplicate; Page 271 - Duplicate; Page 272 - Duplicate; Page 273 - Duplicate; Page 274 - Duplicate; Page 275 - Duplicate; Page 276 - Duplicate; Page 277 - Duplicate; Page 278 - Duplicate; Page 279 - Duplicate; Page 280 - Duplicate; Page 281 - Duplicate; Page 282 - Duplicate; Page 283 - Duplicate; Page 284 - Duplicate; Page 285 - Duplicate; Page 286 - Duplicate; Page 287 - Duplicate; Page 288 - Duplicate; Page 289 - Duplicate; Page 290 - Duplicate; Page 291 - Duplicate; Page 292 - Duplicate; Page 293 - Duplicate; Page 294 - Duplicate; Page 295 - Duplicate; Page 296 - Duplicate; Page 297 - Duplicate; Page 298 - Duplicate; Page 299 - Duplicate; Page 300 - Duplicate; Page 301 - Duplicate; Page 302 - Duplicate; Page 303 - Duplicate; Page 304 - Duplicate; Page 305 - Duplicate; Page 306 - Duplicate; Page 307 - Duplicate; Page 308 - Duplicate; Page 309 - Duplicate; Page 310 - Duplicate; Page 311 - Duplicate; Page 312 - Duplicate; Page 313 - Duplicate; Page 314 - Duplicate; Page 315 - Duplicate; Page 316 - Duplicate; Page 317 - Duplicate; Page 318 - Duplicate; Page 319 - Duplicate; Page 320 - Duplicate; Page 321 - Duplicate; Page 322 - Duplicate; Page 323 - Duplicate; Page 324 - Duplicate; Page 325 - Duplicate; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 1 Page 1 - b3; b6; b7C; b7E; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) 1 Page 1 - b7E; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) 1 Page 1 - b6; b7C; b7E; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X x No Duplication Fee x x For this Page x xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 1 Page 1 - bl; b3; b6; b7C; b7E; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) 1 Page 1 - b3; b7E; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) = 1 Page 1 - b3; b6; b7C; b7E; OTHER - Sealed pursuant to United States Court Order; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

l liiiiiiiiiiiiii1111lllll!!!ii!ll·.·.·.·:·:·:·:·::::::::;:;:;:;i:;:;:;:;:;:;:;·+ ...

.,:·

HRC- 10663

FEDERAL BUREAU OF INVESTIGATION FOI/PA DELETED PAGE INFORMATION SHEET FOI/PA# 1353814-0

Total Deleted Page(s) 39 Page 7 - Duplicate; Page 9 - Duplicate; Page 11 - Duplicate; Page 15 - Duplicate; Page 16 - Duplicate; Page 17 - Duplicate; Page 23 - Duplicate; Page 24 - Duplicate; Page 25 - Duplicate; Page 27 - Duplicate; Page 28 - Duplicate; Page 29 - Duplicate; Page 35 - Duplicate; Page 42 - Duplicate; Page 43 - Duplicate; Page 44 - Duplicate; Page 46 - Duplicate; Page 47 - Duplicate; Page 49 - Duplicate; Page 50 - Duplicate; Page 51 - Duplicate; Page 52 - Duplicate; Page 54 - Duplicate; Page 55 - Duplicate; Page 59 - Duplicate; Page 60 - Duplicate; Page 62 - Duplicate; Page 70 - Duplicate; Page 76 - Duplicate; Page 77 - Duplicate; Page 78 - Duplicate; Page 90 - Duplicate; Page 91 - Duplicate; Page 101 - Duplicate; Page 102 - Duplicate; Page 106 - Duplicate; Page 108 - Duplicate; Page 110 - Duplicate; Page 111 - Duplicate; xxxxxxxxxxxxxxxxxxxxxxxx X Deleted Page(s) X X No Duplication Fee X X For this Page X xxxxxxxxxxxxxxxxxxxxxxxx A L L INfORM.\'rION CONTAIMED HEREIN I S UNC L.ASSE'!EC DATE 0 5-1<3- :2017 .3Y J 3 7 J SEo'T94 ~1SICG • • FD-340 (Rev. 4-l !' b3 File Number_ b7E field omcc A._c_q_u_I-rt_n_g_E_v_l_d_eo_c_e_ _~~w=::F:======~ ------

Serial # of Originating Document _____l.._1_ ._(o,.______

Date Received

From (Name of Contributor/lntcrVicwee)

(Address)

ICi!y apd State)

b6 By sAJ b7C --~~~~~~=--~~~~~ To Be Returned D Yes ~ Receipt Given 0 Yes ~ Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) Federal Rules of Criminal Procedure 0 Yes Federal Ta}:payer Information (FTI) 0 Yes f'\Ib'-lfAt. ~,. MJ:st1Af4btlf& rE ~flEC>

Reference: (Communication Enclosing Material)

Description: · D Original notes re interview of p~~\,~.r~

HRC-2864 ;._LL FBI mrDRllATION CON'TAINED HEREIN IS mJCLASSifIEC DATE 12-06-201£ BY J7tiJ18'l'SO NSICG

CORRESPONDENCE;

:_...... ~ .... ., .. •\'~~ ' :1f~fui- ' : ...tti>~J'.it~. . ' . 1@/~wio>m' :: .··: " .. · ::~::Dxesw:u:a·prcW©irru'/~@i 1 8/6/15 W&C/DOJ Intent re: Voluntary Production

2 8/7/15 W&C/DOJ Revised Ltr re: Intent re: Voluntary Production/ Server Equipment

3 8/10/15 DOJ/W&C Voluntary Production/ Server Equipment/Limited Account

4 8/31/15 DOJ/W&C Cooperation/appieara nee

5 9/10/15 DOJ/Wilmer Agreement re: removal of Personal & Business files

6 .9/21/15 DOJ/W&C Post Voluntary Production/ Server Equipment

7 9/22/15 W&C/DOJ Response to 9/2~. W&C Letter

8 9/24/15 DOJ/Wilmer Agreement re: voluntarily provided equipment &review of files

9 9/25/15 DOJ/W&C A. Attorney Cliernt Privilege/Medical list/Individuals, etc. B. Consent to Search

• 10 9/29/15 W&C/DOJ Response to 9/25/15 W&C letters/Filter

11 9/30/15 DOJ/BS&F Consent to access back-up files

12 10/1/15 W&C/DOJ A. Attorney Cli'ent Privilege /Medical list/Individuals, etc. B. Consent to Search

13 10/2/15 IDOJ/W&C Response to 10/li/15 W&C letters/Filter

14 10/4/15 W&C/DOJ F~llow-up Ltr re: Summary on Voluntary Productions 7:37 am 15 10/4/15 W&C/DOJ Follow-up Ltr re: Agreements/ Production Stages/ 7:39 am Addresses/Equiprment

16 10/5/15 DOJ/Wilmer Turnover of equipment, securely deleted items and remaining files

17 10/7/15 DOJ/L&W Grant of Limited Consent to Take Possession of Personal Electronic Information ·- 18 10/9/15 W&C;L&W/DOJ Correction of email address listed in Footnote 19 10/14/15 DOJ/W&C Identifying equipment or devices that might contain or might have contained emails from 1/21/09 to 2/1/13 HRC-2865 20 10/16/15 DOJ/ W&C Consent to search files dated 1/21/ 09 to 2/ 1/13 that may be located • · on equipment provided by the FBI

1--~-+-~~~-t-~~~~~~+-~~~~~~~~~~~~~~~~~~~~~~---f 21 10/ 16/ 15 DOJ/ Wilmer Emails produced. Equipment with 3 page summary attached

22 10/ 28/ 15 Wilmer/ DOJ Confirming receipt of spread sheet and status of 30 emails

23 10/28/15 DOJ/ W&C Supplement to letter dated 9/25/15 concerning back-up files and consent to search

24 11/9/15 W&C &L&W/DOJ Clarification of letter dated 10/4/15

25 11/25/15 DOJ/ Wilmer Per 9/10/15 agreement, voluntarily providing FBI w/1 WD HD

26 12/14/15 DOJ/ Wilmer Back-up files relating to 2 BlackBerry devices not belonging to HC.

27 12/ 17 / 15 Wilmer/ DOJ Confirmation of marked files relating to 2 BlackBerry devices not belonging to HC.

28 1/ 8/ 16 PWRWG/ DOJ Request for voluntary interviews

29 1/11/16 W&C/Wilmer Production of Retention Data from Copper {previously given to FBI • on 9/24 & 10/5/15)

30 1/11/16 WCPHD/DOJ Agreements made on 1/16/16 & 1/10/16 re: back-up copy of files retained my Cooper, Wilmer may transfer retention data under conditions

31 1/11/16 DOJ/Wilmer Per 9/10/15 agreement, voluntary providing to FBI SanDisk thumb drive; authorization to review Cooper materials

32 1/11/16 DOJ/ Wilmer W&C is maintaining ret ention data re: Cooper and assumes responsibility for responding to future DOJ request

33 1/ 12/ 16 DOJ / PWRWG Response to request for voluntary interviews of Mills and Samuelson

34 1/ 12/ 16 DOJ/ PWRWG Response to request for voluntary interviews of Sullivan

35 1/ 14/16 PWRWG/DOJ Clarity, defined scope and duration re : request for voluntary interviews of Sullivan

• 36 2/9/16 W&C/DOJ List of equipment or devices that may contain emails relating to email domain per FBI

37 2/22/16 DOJ/Wilmer Cooper item production & Kroll' s/Shred It's process . HRC-2866 1"!> . ., .. ,'.' ,,, . -" - ~ ':.:\.-' t · .·· . ; - .. ~·' . .. .···•'( ' '.}afoi ·. ··;,.·:.iD'·ia!.i e· ·.." · :: ·101.f·we>m; ' ·. .~.'. -~ ..; ·'.> .. : "IQie~·~ri~~ioro/~oies .·. ·:.; .. " ,· ·,_\·:. ·:~- · ·~ ': .. .. 38 2/22/16 DOJ/ W&C Response to 2/9/16 DOJ Ltr re devices & equipment

39 2/22/ 16 DOJ/W&C 2 Inquiries by DOJ re: W&C seria ~ nos for laptops & 1/ 21/ 09-2/ 1/ 13 • emails ·- 40 ~/23/16 DOJ/W&C IPad re: emails for 1/21/09-2/1/13 & forensic analysis

•

HRC-2867 •

-- .

•

HRC-2868 •

I i I I N

I (./ •

••

HRC-2870 •

r \ .. •

(

•

HRC- 2872 •

•

HRC-2874 LAW OFFICES WILLIAMS & CONNOLLY LLP • 725 TWELFTH STREET. N.W. WASHINGTON, D. C. 20005-5901 t~.4"\R.b •'-~TT ~MS U920-1~88> DJ\ VID E. KENDALL PAUi. ~ CON>lOt.lY 0022·11>.1'8) (202) 43<1·5145 (202} 434-5000 d"[email protected] FAX (202} 434-5029

August 31, 2015

BY EMAIL AND FIRST CLASS MAIL

b6 Per NSD I I b7C Per NSD Omted States Department of Justice National Security Division 600 E Street, ~ Washington, DC 20530

Dear... b6 Per NSD I ____. b7C Per NSD • As you may know, the former Secretary of State has repeatedly stated that she will cooperate with your inquiry in whatever way she can. Accordingly, she would be happy to appear voluntarily to answer questions, if that would be helpful in achieving as expeditious a resolution as possible. She does have scheduling commitments, but I'm sure we can work around those. · ' Z/;- . Kendall

DEK/bb

•

HRC-2875 •

•

. - -· --

• ()1 I HRC-2876) ( __ / • "

•

• HRC-2880 ..... _.. .______·---·.... ·- ..-·-- .. ...- ~=···~-

LAW OFFICES WILLIAMS 8 CONNOLLY LLP •• 725 TWELFTH STREET, NW. WASHINGTON, D. C. 20005·5901 !l::NVAkD B~N'N2TT WJU.lAM$ (1Q20·1£1$8J DAVID E. KENDALL >AUL R... CO'NNOU.l' (l.,22.. 11l>76) (202) 434·5145 C202) 434·5000 [email protected] FAX (202) 434·5029

September 21, 2015

BY EMAIL AND FmST CLASS MAIL

b6 Per NSD United States Department of Justice b7C Per NSD National Security Division 600 E Street, NW Washington, DC 20530

. Dea.rl._ ____. b6 Per NSD b7C Per NSD On behalf of former Secretary of State Clinton, I want to reiterate our desire to facilitate the security inquiry we unde.rstand the Department is conducting at the behest of the Intelligence Community Inspector General into the storage of r~ently-classified e •• mails anhe [email protected] address. As you know, shortly after this inquiry was announced, we voluntarily provided a thumb drive (and copies) and the server equipment which supported th.is email account during the Secretary's tenure at the State Department. I also shared with you that the Secretary would voluntarily answer any questions you might have~ Should you need to assess the successor server which for a time hosted this address and the successor hrodl [email protected] address, we also would be happy to assist you in that regard, consistent with maintaining the privacy of other e~mail accounts that are not part of your inquiry.

In short, we want to facilitate the efficiency of this security inquiry and look forward to learning from you if there are ways of which we can be of assistance.

DEK/bb • HRC-2881 •

--J . '

•

• HRC-2882 A.LL FBI IlffORU:ATION CON'l'A.HIED HEREIN IS UNCl..ASSIE'IEO CA'l'E 12-06-201'; BY J76J18T80 N'SICG U.S. Department of Justice • National Security Division WasJ1ing1on, D.C. 20530

David E. Kendall; Esq. Williams & Connolly LLP 725 Twelfth Street, N.W. Washington, DC 20005

September 22, 2015

Dear Mr. Kendall,

We are in recei pt of your letter dated September 21, 20 I 5, which offers, among other things, access to what you have referred to as a "successor server" to the server equipment previously produced to the FBI on August 12, 2015 . Based upon the FBI' s investigation, we understand that this "successor server" is in the custody of, and is being operated by, Platte River Networks and that it, at least for some time, contained emails to or from Secretary Clintor1'[email protected] account.

We are concerned that, notwithstanding your repeated statements in oral and written co1Tespondence regarding your and your.client's wiltingness to eooperate in this matter, you had not raised the ·existence of the "successor server" or offered access to it prior to your September 2.l letter. We remind you that this server is covered by the preservation letters delivered to Williams & Connolly LLP on July 31, 201 5, and Platte River Networks on July 30, 2015, and we request that you ensure that this server remain operational with a continuous power source (i.e., that it is not unplugged or its operation otherwise • intenupted) until further notice. We also reiterate that the aforementioned preservation letters cover any other equipment or devices, whether or not previously disclosed, that contain or contained emails to or from the domain account @clintonemail. com, including all equipment related to the server voluntarily produced to the FBI on August l 2; the "successor server" and all related equipment; any other server and all related equipment that received or sent emails for this domain account; and all backup devices, including backup hardware purchased from or maintained by Datto, Inc. While we will seek to proceed in a manner that causes the least amount of disruptjon to otherwise unrelated accounts and activities, we will take all necessary and appropriate step:; to obtain any and all such equipment and items.

Sincerely, b6 Per NSD b7C Per NSD

_ . cc: Kenneth Eichner, Esq . •

HRC-2883 •

• . l . /'

•

HRC-2884 •

•

~ I I I

\0 · 1 i

---··J. J ...... ,../ ••

HRC-2888 •

•

. ! •

__ .tf· c- 2892 (- r

U.S. Department of Justice . .. National Security Division

Wasliing1011, D.C. 20530

BY EMAIL

David E. Kendall, Esq. Wil liams & Connolly LLP 725 Twelfth Street, N.W. Washington, DC 20005

September 29, 2015

Dear Mr. Kendall,

This letter confirms receipt of two letters you sent me on September 25, 2015. Regarding your letter providing a list of individuals and entities with whom Secretruy Clinton may have communicated in a privileged context, when deemed necessary we will be using a filter process to account for the possibility that records may contain p1ivileged infonnation. During the filter process, we will detennine what privileges may apply and how best to identify privileged.information, utilizing as appropriate the list of individuals and entities you provided.

• C>. ' b6 per NSD b7C per NSD

•

HRC-2893 '-

•. l j ' .._. : Ir ~I • .I

•

HRC-2894 • September 30, 2015

VIA ELECTRONIC MAIL

I . b6 per NSD ...... ,U"""''...,.S-. D__ e_par _ tm_ en_t -of-....Juscice b7C per NSD Na.cional Securit:y Division 905 Pennsylvania Avenue, N.W. Washington, DC 20530

b6 per NSD · o~--- b7C per NSD Pursuant to our con•ersacion on September 29, 2015, this letter provides the Depamnem of ·Justice consent to access the back-up files associated with Ms. Hu.ma Abedin's email account for the purpose of your security inquiry.

We request that the historical email content from Ms. Abedin's account dated February 2, 2013 to the present be migrated to the new server and associated equipment acquired by Platte Jm,e.r Nerworks in conjunction with your inquiry .

Thank you for your co:ilsideracion.

• Very r:ruly yours,

Ut~ /s/ Kar.en L. Dunn f\.figuel E. Rodriguez Karen L. Dunn Bryan Cave LLP Boies, Schiller & Flcxner lLP 1155 F Street, .NW' 5301 Wisconsin Ave. NW Washington, DC 20004 Washington, D C 20015

•

HRC-2895 •

Jiiiooi N •'

' ·. i I

•

HRC-2896 ······~

LAW OFFICES WIT..UAM5 B CONNOLLY llP 725 TWELFTH STREET, N. W.

• WASHINGTON, D. C. 20005-5901 ED".A.AD BENWE'TJ "OV1U.1AMS (192'0-ISJB8") D/\ VID E. KENDALL PAJ.Jl.. k.. C~OU..Y (J922-J978) (202) 43d-5145 (202) 434-5000 dkendallCwc.com FAX (202) 434-5029

October 1, 2015

BY EMAIL AND FIRST CLASS MAIL

b6 per NSD b7C per NSD U.S. Department of Justice National Security Division 905 Pennsylvania Avenue NW Washington, DC 20530 ~ l write regarding the Department of Justice's security inquiry in response. to a referral from the Inspector General of the Intelligence Community. Pursuant to our conversation, I • understand that your security inquiry may involve review of Secretary Clinton's e-mails for evidence relevant to that inquiry. As discussed, her e-mails include materials covered by attorney-client, marital, or medical privileges. I provide the following list of individuals and entities with whom Secretary Clinton may have communicated in a privileged _context. ·

Attorneys

I lwilliarns & Cormolly ~LP b6 per NSD I l\iiilliams & CoIIDolly LLP b7C per NSD David Kendall, Williams & Connolly LLP I IUtrec ht, Kleinfeld, Fiori, Partners (f/k/a Ryan, Phillips, Utrecht & MacK.innon) Che I Mills in her capacity as personal counsel on prior matters) f------...JWilliams & Connolly LLP ~------=--·r ogan Lovells Katherine Turner, Williams & Connolly LLP ,______.~ trecht, Kleinfeld, Fiori, Partners (f/k/a Ryan, Phillips, Utrecht & MacKinnon)

Doctors

b6 per NSD • b7C per NSD

HRC-2898 WIWAMS S CONNOU:.Y LLP b6 per NSD October l , 2015 b7C per NSD • Page2

Marital

President William Jefferson Clinton

Personal Aides to President Clinton or form,er Secretary Clinton/Conduits ofMarital C ns b6 per NSD b?C per NSD

• Personal

'{?olnfi,u>r b6 per NSD b7C per NSD

r rsonal Financial Consultant b6 per NSD b7C per NSD •

HRC-2899 ------~--..m»•••·· ···· ·-····

WILLIAMS 8 CONNOLLY LLP I b6 per NSD . October 1, 2015 b7C per NSD • Page3 We request and anticipate that at the conclusion of your inquiry you will return to us the former Secretary's non-federal record, personal e-mails. f!!Jt?~ Davi~ l. Kendall

••

•

HRC-2900 •

•

HRC-2901 U.S. Department of Justice • National Security Division Washington, D.C. 20530

BY EMAIL

David E. Kendall, Esq. Williams & Connolly LLP 725 Tweifth Street, N.W. Washington, DC 20005

October 2, 2015

Deal' Mr. Kendall,

This letter confirms receipt of two letters you sent me on October I, 2015. Regarding your Jetter providing a list of individuals and entities with whom Se::retary Clinton may have communicated in a privileged context, when deemed necessary we will be using a filter process to account for the possibility that records may contain privileged information. During the filter process, we will determine what privileges may apply and how best to identify privileged information, utilizing as appropriate the list of • individuals and. entities you provided. · b6 per NSD b7C per NSD

•

HRC-2902 •

•

·~

' - . • HRC-2903 •

•

( i I • HRC-2907 •

•

HRC-2910 •

( •

i ;' i i 1 i. " •

HRC-2915 •

[ ,.... • I QC

•

HRC-2918 U.S. Department of Justice

National ~ecurity Division

• Washington. D.C. 20530

David E. Kendall, Esq. Katherine M. Turner, Esq. Williams & Connolly LLP 725 Twelfth Street., N.W. Washington, DC 20005

b6 per NSD Latham & Watkins LLP b7C per NSD 555 Eleventh Street, N.W. Suite 1000 Washington, DC .20004

October 9, 201 5

Dear Mr. Kendall, Ms. Turner, an4.______. .. l b6 per NSD b7C per NSD In reference to my letter of October 4, 2015, I write to provide clarification of a minor factual error contained therein. The email address associated :with the nam~ Iset forth in subparagraph 2 and footnote 3 on rage 2 of the letter, was incorrectly provided as • .The correct email address for the account is I~-~~~~~~~~~' . .

b6 per NSD b7C per NSD

·1 i i cc: Miguel E. Rodriguez, Esq.; i t Karen L. Dunn,. Esq. I '~

1' l .?

• ,.

HRC-2919 •

•

HRC-2920 •

•

• · N=

HRC-2923 •~ le

f I. r

~·

HRC-2931 •

, _ !

•

HRC-2933 ALL FBI INFORMA.'T I ON CC:HTAINEC H:E'REIH IS UNC L...~ SSIFI ED DAT 'E 12-06- 20115 BY Ji6J18T80 HSICG

LAW OFFICES WILLIAMS & CONNOLLY LLP • 725 TWELFTH STREET, N.W. WASHINGTON, D. C. 20005-5901 JltN"hk O BE.NN~ Wfl.l..l'°'M~ tl9 20· J0 68) DAVID E. KEN DALL PAU C.. fl... CO'N~ OLt..Y (192'2 · t $.78) (202) 434-5145 (202) 434-5000 [email protected] FAX (202) 434-5029

October 28, 2015

b6 per NSD U:S. Department ofJustice b7C per NSD National Security Division 905 Pennsylvania A venue NW Washington, DC 2053 0

DeaJ.... ____, b6 per NSD b7C per NSD As discussed, this Jetter supplements my September 25, 2015 letter to you concerning the back-up files of former Secretary Clinton, and gives the. Department of Justice consent to search, for evidence relevant.to your security inquiry, all content contained in those back-up files. • Fwther, we note that we provide this consent with the understanding that, as stated in your October 4, 2015 letter td pnd me, all items voluntarily produced will be .b6 returned to the owners or disposed of co'nsistent with FBI policies and procedures at the b7C conclusion of the investigation.

Sincerely, · '(7~, &? f. ~ David E. Kendall

•

HRC-2934 •

•

HRC-2935 U.S. Department of Justice

National Security Division

• Washington. D.C. 20530

David E. Kendall, Esq. Katherine M. Turner, Esq. Williams & Connolly LLP 725 Twelfth Street, N.W. Washington, DC 20005

b6 per NSD Latham & Watkins LLP b7C per NSD 555 Eleventh Street, N.W. Suite 1000 Washington, DC 20004

November 9, 2015 ·

Dear Mr. Kendall, Ms. Tumer, an ~.______. b6 per NSD b7C per NSD In reference to my letter of October 4, 2015, I write to provide clarification of an additional minor factual error contained therein. The letter stated in subparagraph 2 and footnote 3 on page 2 that all of the email content in certain accounts, with the exception of six (6) identified emails that may reside in the accounts, • could be transferred to the New Server. These email a · · in the letter as I ~ndan _ accountontll sn tedinm b6 per NSD October 9, 2015 letter the co r1-ect email address for the b7C per NSD The account,.....__, on th ...... ______...... For both th ema1 actually appeared twe ve ( , not six ( times, an t iere ore w 1en e content of these accounts was transferred to the New Server, all content was transferred with the exception of these twelve (12) emails . .. I l Sincerely, · 1 b6 per NSD b7C per NSD

f. cc: Miguel E. Rodriguez, Esq.; Karen L. Dunn, Esq. I f • 1

HRC-2936 ••

. ·' •

HRC-2937 ··~

•

HRC-2941 A.LL F3I nr.rORMA'l'IOl:l' CONTAINED HERE.I H IS UNCLASSIFIED CATE 12-06-201£ BY J76J18T80 NSICC

. WILMERHALF b6 per FBI, NSD • r------.b7C per FBI, NSD December 14, 2015 . ) I I National Security Division Department of Justiee Washingtop, D,C. 201 530

"·ay Email: ... ___.I b6 per NSD !______b7C per NSD .. oeaj.___ __,J ..

. As you know, we previously .Provided the FBI one Apple ·brand MaeBook Pro laptop computer, ·serial Nwnber W89361H6644 ("MacBook Pr9"), ~done Apple brand MacBop).< Air laptop.· computer, Seri~Numl:>d lc"MacBook Air") (collectively, "laptQpS"), that b6 belonged to Justin Cooper: We provided botldaptops for the purposes ofDOJ/FB I'.s b7C investigation .ofSecretary Clinton's personal email accounts. ·

·As agreed, at the time of theirdelivery t.}1e laptops contained ·Mr. Coaper's emaiis to and from $ec.retary Clintoti during her tenure as Secretary of State extracted from his email files. The laptops also contained back:--UP copies of a Siackberty device,( or devices) that we·un9erstood belonged to sedretaiy Clinton. , . •• • As you know we have since determined that abaek-up copy qf a Blackberry device th~t remained on each of the MaeBook Pro and MacBook Air 9id not belong to Secretar)' CHnton: Those n1es were .labeled as follows: ·" .

· • · .MacBook Pro; lterQ. 4, filename ·HR·BlackBerry Bold. 9900.ipd • .MacBook Air, Item 5., filename HR ~Ja:ckBerry Bold ~900.ipd

. As we have discussed, ~e ~k that you (1) re'riiove all :copies (digital and hard copy) of these tWo files fr9tn.anyU.S. government review cycle and that they not be reviewed; (2) qestroy or. . . ·otherwise ~ndet them inaccessible; and (3) send written ·ronfirtnation of the same. Thank you ·for your atten tioii to this. matter.

Sincerelv vours · · b6 b7C

Wilmer Cutler Piclcering ·Hale: and Do rr L\..I', J 8,15 P~nnsylvania Avenue NW, Washington, DC '20006 . • Beijing Berlin Boston Brusseis ·Denver Frsnkfun London Los. Angeles New York . Odord. . Palo Alto . Washington

HRC-2942 ' • i

. - N -....I

•

HRC-2943 ALL .FBI I NFORU.ATION CONTAINED REREIH IS U1~C~SIFIED DA'fE 1 2-0o-20 115 BY J76Jl8'T80 HSICG

U.S. Department of Jus.tice •• National· Security Division

Wo:hlng/011, D.C. 20530

b6 Wilmer Cutler Pickering Hale and Dorr LLP b7C 1875 Pennsylvania Ave. N.W. Washington, DC 20006

December J7, 2015

b6 . b7C This letter confinns receipt of the letter you sent me on December 15, 2015, identifying a back-up copy of a Blackberry device present on two computers produced to the Federal Bureau oflnvestigation (FB[) by Mr. Cooper that did not meet our agreed-upon cri~eria for production. As we have discussed, the FBI will mark the back-up files identified in your letter such that, going forward, they will not be reviewed on any • image of the materials that is in the possession of1the FBI. b6 per NSD b7C per NSD

•

HRC-2944 •

N • 00

~/ . .

•

HRC-2945 U.S. Department of .Justice •• National Security Division Wa1hingto11. D.C. 20530

January 8, 2016

BY EMAIL

Beth A. Wilkinson, Esq. Paul, Weiss, Rift.ind, Wharton & Garrison LLP 2001 K Street, NW Washington, DC 20006-1047 ...... ····-··----:··~·-:··· ... ·--·~--·.-----·---·--·--·~·---·-·...... _,.. , .. -;--· .. ··-·- ..... --······---~·..... --·-~·-·----.... ____ ,, ...... ,__ .. ,_.·-··-····~· ...... ____ --·~-:··:--:-:··::·~··:-:--·-·:-·:-··-·-····

Dear Ms. Wilkinson:

I am writing to reiterate our previous request, which you have declined thus far, to conduct voluntary interviews with your clients Cheryl Mills, Heather Samuelson, and Jake Sullivan. If ., •. you are willing to make these individuals available for voluntary interviews, please advise us as soon as possible.

Sincerelv b6 per NSD b7C per NSD

•

HRC-2946 •

• ----

•

HRC-2947 ALL fBI IlU"ORHA'fION COH'l'.l>,.INEC 3Z~Hl I S um::L..ASSIFIED DA 'i"::: 12-06-2016 B'l J76J18T80 NSICG • WIIMERHALE b6 January 11, 2016 b7C

David Kenda14 Esq. Katherine Turner, Esq. Williams & Connolly 725 Twelfth Street, NW Washington, DC 20005 • Dear Mr. Kendall and Ms. Turner:

As we h~ve agreed, (1) today we are giving you certain data (hereinafter "retention data") 1 from Justin Cooper's Apple·MacBook Air laptop and Apple MacBook·Pro laptop that were provided tQ the FBI on September 24, 2015, and October 5, 2015, respectively, and (2) you will retain the retentio°' data until such time that you reach an agreement with DOJ that the retention data no longer need b~ retained.

DOJ may request that you provide files from the retention data as part of the DOJ/FBI security inquiry of Secretary Clinton's personal email accounts. You have assumed responsibility for • responding _to any such future DOJ requests. We have made clear to DOJ that Mr. Cooper will not interpose any objection to DOJ possessing and reviewing files from the retention data that are responsive to such requests, and that Mr. Cooper has otherwise relinquished his ownership of and rights to the ~tet?-tion data

Best re ards, b6 b7C

nc osures

cc:I b6 per NSD --~------' b7C per NSD

1 We have enclosed our Jetter agreement with DOJ specifying what constitutes "retention data."

Wilmer Cucler Pickering Hale and Dorr U.P, 1875 Pcnnsylvani~.b.!~!-:1.t N'w. Washington, DC 20006 Beijing Berlin Boston Bru$sels Denver Fren\cfurt London Los Angeles Nl'W Yori: Palo Alto Wa;hington

HRC-2948 . lef i ~ i' I

iI • l t l I

I( I

(.H ' Q I I

\, ... - HRC-2949 Al.L FBI H lFORMA'l'ION' CONTAINED HEREIN IS UNCLASSifIEO CATE 12- 0~-201£ EY J76J18'1'80 NSICG

U.S. Department of Justice •• National Security Division Washington. D.C. 20S30

January 11, 2016

BY EMAIL

______.I . b6 Wilmer Cutler Pickering Hale and Dorr LLP b7C 1875 Pennsylvania Avenue, N.W. Washington, DC 20006

Dear Mr. Zebley: ...... ---:-·.--·- .. -·-·----·-·--··-·-.... ----·····--··-··- - ..--- ·---..·- ··-·-··----·-·-·"... _____ ,.. _.,.__ ___, ____ ,...... ___, _,,,,...... , ___., ______,_,. __ .... ~.-··· ..· ; As· we ·agreed on January 6, 2016, WilmerHale (or other counsel, as later agreed between WilmerHale and DOJ) will maintain a back-up copy of all personal and business files present on the Mac Book Air (provided to the FBI on September 24, 2015) and, separately, the Mac Book Pro (provided to the FBI on October 5, 2015), whether or not retained by Mr. Cooper, containing: (I) any communications that include [email protected] email address; (2) any reference to the establishment or maintenance of [email protected] domain, including but not limited to references to any server(s) on which that email domain was maintained, stored, or • operated; (3) any communications that include Bryan Pagliano; and ( 4) any communications that include an @state.gov email address dated December 1, 2008, or later (collectively "the retention data"). Mr. Cooper.and WilmerHale (or other counsel, as later agreed between WilmerHale and DOJ) need not retain back-up images of the MacBook Air and the MacBook Pro.

As we discussed and agreed on January 10, 2016, WilmerHale may transfer the retention data to other counsel on the conditions that (1) you provide me the name and contact infonnation of the other counsel, and (2) the other counsel must agree to retain the retention data until such time that he/she reaches an agreement with DOJ that the retention data no longer need be retained.

b6 per NSD b7C per NSD

•

HRC-2950 ··~ ~-

•

• HRC-2951 •

•

HRC-2954 ALL fBI IHFCRH..C..'TIDH COH'l'AINED HEREIN I S UNCUSSIFIED DATE 12-06 - 2 0 16 BY .176 Jl8T80 NSICC

WlIMERHALE

b6 January 11, 2016 b7C

b6 per NSD National Security Division b7C per NSD Department of Justice 950 Pennsylvania Avenue, NW Washington, D.C. 20530 ByEmail : ~I ~~~~~~____. Deail,_ ____,

As requested, Williams & Connolly (points of contact: David Kendall and Katherine Turner, (202-434-5000)) is maintaining all files that remained in our possession from Justin Cooper's Apple MacBook Air laptop and Apple MacBook Pio laptop that meet the criteria set forth in your letter to us dated January 11, 2016 .(hereinafter "retention data"). Williams & Connolly has · agreed to retain the retention data until such time that it reaches an agreement with DOJ that the retention data no longer need be retained. • As the owner of the retention data, Williams & Connolly has assumed responsibility for responding to future OOJ requests made for the retention data in the DOJ/FBI security inquiry of Secretary Clinton's personal email accounts. Mr. Cooper.will not interpose any objection to · DOJ possessing and reviewing files that are responsive to such requests, and has otherwise relinquished his ownership of and rights to the retention data. · ·

Best ds b6 b7C

Wilmer Cutler Pickering Hale and Dorr tu, 1875 Pennsylvania Avenue NW, Washingron, DC 200o6 •• Beijing Berlin Boston Brussels Derwer Frenldurt London Los ArQele~ New York Pa\o Alto Wsshington

HRC-2955 •

• .,

•

HRC-2956 PAUL, WEISS. RIFKiND, WHARTON f$ GARRISON LLP UNIT 380', OFF1C£ iOWER A, 8£1.JING FORTUNE: PLA.'ZA .200.1 K STR.EET. NW WASHINGTON. D.C 2000~-1047 NO, '7 OONGSANHUAN Z.HONGLU • TE\.E.PHON£ 12oi1 n~·?300 CHA.OYA.NG o•snuc:T etCtJ ING • 0002:0 DEO~L.£'$ RE.PUSL•e 0,. Cl-4•1114'.A. TEl.E"t-t0N£. 486•10·1 5628·&300

SETM A..• WILKINSON • 2.TH FL..cioft. MONG KoNG CLue aurLotNG 3A CHA.TER ROAC, Ce:NTRAL HONC KONC U\.E•»•O'!E: 1202) 223-?34C> 'rtLEPl-40NE. C8S2) 2.806•0300 F4CSIMIL.t 1202) 204·7395

A.L.O~R CASTL£. \0 H09l.t SiREET LONOON EC2V 7JU. U.K. i£LEPHO"'E f.44 Z.OJ .,:)~7 '600

"FUKOKU SEIM El BUI L.ClNJ; 2·2 UCH15AIWAICHO 29CH0ME CHfYOOA.·>AN January 12, 2016 TELIEPMON£ (8 l~SJ 3~9.,.•8 lOt

TOAONTO·DOMtNION C:~NTRe:· 17 K1NC SJAf:ET W!.ST, SUITt;: 3100 f'.o. eox 2z.6 T'OAONTO. ONTARIO MSl'I'. tJ3 TE'LEPMONE 14' 6J SOA1·0520

2001 I( STAEE.T. NW · WASHINGTON, De 2.0006>1047 . VIA Electronic Mail T£LEPHONE l202> 2·2.l.'1300

500 OELAWA1'1:E AVENUE. SUlff'.:200 POST' OF~JCE eox 32. b6 per NSD WILMIHGT'O~, 0£ 19899·0032 b7C per NSD iELE'PMONE C302.) 6SS-4410 Counterintelligence and Export Control Section National Security Division U.S. Department of Justice

Dew!.______, b6 per NSD b7C per NSD I am writing on behalf of Cheryl Mills and Heather Samuelson in response to your • January 8, 2016 request that they submit to a volun~ interview. Ms. Mills and Ms. Samuelson serve as attorneys for Hillary Clinton. Accordingly, they each are bound by ethical rules and obligations not to discuss privileged or confidential information within the scope of their legal representation of former Secretary Clinton. See D.C. Rule of Professional Conduct 1.6. We therefore are not in a position to consent to a voluntary interview of either Ms. Mills or Ms. Samuelson.

Sincerely, --g~ 4/_.4_ //.%-g& Beth A. Wilkinson

•

HRC-2957 -·

•

,. --

'-· . ~ I •

HRC-2958 PAUL, WElss: RIFKIND, WHARTON & GARRISON LLP UNli 3601. OFFLCE 'TOWEii! A., BE.tJtNG Ft>RTUNE Pl..AZA 2001 K STREET, NW WASHINGTON, DC 20006· 1047 NO. '7 OONGS.. NHUAN ZHONGl.U T~~EPHONE C2:02:J 2:23-'7300 CHA.OYANG DISTRIC'r D£JJINC • 0002.0 Pe:CPl.('$ RE.PUBl.IC OF CHtrU. TEt..EPHONE t8f.-1 O• S82&-6300

SETH ... wn.. KINSON •i2TH PL00R. HONG 1(0NG C:t.UB BUl~DING • :u. CH4TE.R RQAD. CENTFtAt. MONC KON¢ . TELE:l'HONE 1202) ZZ3•7340 TE'-.EPHONE t852) 28•6..0300 •A=SlMl\.E (:!02) 204·7395 A.LC£R C:ASTl.E E.-M,IUL~ bwHlunsonOpa1Jlwe·1s:s.com 10 NOBL£ STRE.£T LONDON E.C2V 7JU. U.K. l'E!..EPHONE C46 ~OJ 7::167 160C

u.as A.V£NUE OF' TM£ AM£RICAS NEW YORK, NEW YORK 1 ()011·60&4 l'EL£PH0NE fZ •2• 3.,3•><:00 January 12, 2016 FUICOKU SE:IM£1 51UIL,Ql""G i.•i UC'HS$AIWAICHO 2·CHOM£ CHtYOO••KU, TOl(YO 100•0011, .JAPAN TELEPHONE c81 •!J 35il,•8101

iDRONTO~DOMINION CEWTRE. ;,ic.•NG STREET WE5T, 'SUITE >100 J'.Q. 80X Z26 .TORONTO. ONTARIO M5t( 1 Jl VIA Electronic Mail TE.l.EPHON E 14 S&J ~04•0S20

$00 O&:l..AWARE: AY£NUE, SUJTE 200 b6 per NSD POSi 0 F'f"'ICE 80)( 32 Wl1.M~""'1GTON, 0£ 19899-00$2 b7C per NSD I I T£LE.F'HONE. 1302.) c5SS•44 I 0 Countennteibgence and Export Control Section National Security Division · ·u.s. Department of Justice

b6 per NSD ____. De~.._ b7C per NSD

I am writing on behalf of Jake Sullivan in response to your Ja.n~ 8, 2016 request that he submit to a voluntary interview.

In light of our discussions with you to dat.e about the parameterS of such an interview, I cannot recommend to my client that he do so at this time. If you are able to clarify and define the scope and duration of the interview, we are certainly willing to further discuss your request. ..

Sincerely, ]?~ L./__:L._//Tf;J '11

Beth A. Wilkinson

HRC-2959 •

•

• '- - HRC-2960_/ U.S. Department of Justice

National Security Division

• Wasllington. D.C. 10530

January 14, 2016

BY EMAIL

Beth A Wilkinson, Esq . . Paul, Weiss, Rifkind, Wharton & Garrison LLP 2001 K Street, NW Washington, DC 20006-1 04 7 ...... _____ .. ______,._..._...... -...... -•...._.- ...... ~ ...... - •..... _... ___ ,,__,__ ,,.. _,...... ~·····--···· ...... __ ,. ___ ,_...... _..,. ______

Dear Ms. Wilkinson:

I am writing in response to your letter of January 12, 2016 in which you indicated your . willingness to further discuss providing your client, Jake Sullivan, for a voluntary interview if the government was able to "clarify and define the scope and duration" of such an interview. • In an effort to provide such clarification, we can inform you that the subject areas to be covered during the interview would be: Mr. Sullivan's knowledge and understanding of the former Secretary's use of a private email system; his knowledge of email communications regarding sensitive or classified information sent to and/or forwarded to the fonner Secretary; and his knowledge of the handling and transmission of classified information during his tenure at the State Department. Although it is only an estimate, we anticipate that an interview of Mr. Sullivan would require approximately six hours.

If you would like to discuss making Mr. Sullivan available for a voluntary interview, please advise us as soon as possible. ·

Sincerelv. b6 per NSD b7C per NSD •

HRC-2961 \,

•

• HRC-2962 •

/' ~- '·

•

HRC-2965 ~.LL FBI INf.ORMATION CON'l'AIHED HEREIN IS ffi-l'CLASSIFIEC CATE 12-06-2016 BY J76J18T80 NSICG

WILMERHALE

• b6 · February 22, 2016 b7C

...... N"""a""b"""o"'"n""'a ...i ""'Se""'c""'ur...... tf""y""'D~1vision I Department of Justice · Washingt~n, D.C. 20530 b6 per NSD ··:rw1j b7C per NSD

As you know, pursuailt'to written agreements with you, Justin Cooper vollintarily provided the FBI with two laptop computers and certain other media, and Williams & Connolly is retaining certain -other data that was previously in' Mr~ Cooper's possession. l write now to describe the status of hardware used .to process data in connection with those productions and Williams & Connolly' s retention of data. · · . . . Certain. ¢ata was perlodically saved to external drives in order to search for, isolate, and/or save data for production or retention. Kroll ·Inc. ("Kroll") has degaussed and shredded (using a third party vendor called Shred It in Patsippany, New Jersey) all: such extei:nal drives, except as . follows: (-1) drivescontaini;ng,rete~tiori data held by Wrllialils'& Connolly; (2) seven drives .that • were wiped and remain in WilmethHale' s possession pending direction from you on a fmal disposition•. (Note, Kroll also ctegaus~ed _and shredded (u!ii~g the same vendor) the drive known as the "Seagate drive.") .· . . .

Certain data was proce~ed using s~dalone computers. At the. ~onClusi9n of our work on this matter; alFCfata wa8wiped from those drives, tl;:e drives were reinov.¢q from t:q'eir ~~chines; and . the drives were securely stored .periding dire~tio_nJrom you on a final disposition. Wilm~Hale is ..

holding. tWo. 6fthose dHve5',,. . and Kroll. is holding the remaining nine.. drives. · Pleas~ let me know if you have any questions . ..···.

b6 b7C

Wilmer Cutler Picker'ing Hal~ and Dorr LLP, 1875 Pennsylvania Avenue NW, Wa~hingcon, D~ 20006 · Beijing Berlin Boston Brussels - ~envar Franl::turt ·London Los Angeles New York Palo Alto Washingion

HRC-2966 •

~I • 00 I

\, .

•

HRC-2967 •

•

HRC-2969 •

-·

i ·~ •

HRC- 2971 ~\Ui CLF-SSIFIED BY: NSICC .i76.J18TBO EASON: 1_4 (C} D:E:C~.SSI!i OH: 1:2-31-2041 DATE: 12-01-201£

~-LL rm:oru.LATION CON'TAINED HEREIN IS mrCLll,.SSUIED EXCEP'f h'HE~ s:ra~~1·l OTHERWISE / '· .. . { .\

FD-)40~.R_ev.4, ·11-01' b3 - 1-_Jo-z. b7E File Number ------:-----...... :....,....----:""------___;--- W./-.-. Flcld.Ottlec Atqulrlog Evidence ------...... ·ir S•rlal # ofOrlglnat,nc ~··7. meat Da.te tletelnd . . 6( 0 _ ZDI 6

.. "'""T."""!.....,.....______,.. __ _ F~om --1-#~e~cnr~'~/J11..;.:rlJ!~ler""":\:·~·1 ..-·-.:-;::-~· ~- : /, • · (NameofConlrib~!orllnlcrviewee) /ftJ/) J1// ffPlf /i/t) J, 1e

b6 b7C ay __JJ_~~-~l ______z___ ·_m_··_·_·c·rr--~------,.-~

To Be Returned b Yes · ~No ReceiptOiven 0 Ye~ · . Gr· No Grand Jmy Material - Disseminate Only Plµ'suant to Rule 6 (e) 1• :) Federal Rules of Criminal Piocedure. ;~ ' .. \ J :J ·. . :'.J ·.· > ·D Yes. ~No Federal- Taxpayeflnf~rmation (FTI) 1 o:. Y~s c:rNo.

]DZ Rererence: ----~-~------....:....------~(Communicalion Enclosing Material) . -,

~esmptlon: d ... Original no~e' re intervi~ of fo1tJ.e1i.i · ~ !e/ler{J; .,

. r ·~.. = j·

. ~ ·. HRC-2013 of ___ FD-S97 (Rev. 4-13-201 5) .J- UNITED STA TES DEPARTMENT OF JUSTICE FEDERAL BUREAU OF INVESTIGATION Receipt for Property ALL n-iroRHAnDH coN'l'AINED HEREIN IS UNCLASSifIEC DATE 12-01-20145 :3Y Ji~ J 18'1'8 0 NSICC

Case ID: I f On (date) Dbfio/20Jb item (s) listed below were: ' I CJ Collected/Seized ~ Received From RetumedTo BReleased To (Name)

(City)

b6 Description ofltem (s): b7C ani ~A( (1

b6 b7C Receind By:

HRC-2014 ALL I'BI IHF~U..TIOH CON'l'.UNE:i::: ~REIH IS T.mCL..Z\.SSIFIED DATE 12-01-2016 BY J76Jl8T80 HSICG

WILKINSON 1900 M STREET, NW WWW.WILKDISONWALSH.COM SUITE800 WALSH + WASHINGTON, DC 20036 ESKOVITZ A LIMflED LIABIUTY PARnmRSHIP

WASHINGTON, D.C. I LOS ANGELES

June 10, 2016

VIA Electronic Mall

b6 Per NSC b7C Per NSC U.S. Department of Justice National Security Division 950 Pennsylvania Avenue NW Washington, DC 20530

Deat.... ____. b6 Per NSC b7C Per NSC This letter provides consent, in connection with the Department of Justice's investigation into the use of a private server by former Secretary of State Hillary Clinton, to search the Lenovo Yoga 2 Pro (Serial No.I j(hereinafter "the Device") belonging to my client, Heather b6 Samuelson, who is Secretary Clinton's attorney, pursuant to the terms described below. The b7C Device is being provided to the Federal Bureau of Investigation ("FBI") solely for the purposes of this Department of Justice investigation, and for the Department's use in connection with the investigation. In vol~ntarily providing the Device, Heather Samuelson. does not relinquish ownership or control over the Device,. except for the FBI' s limited investigative use as specified by . this agreement. The FBI does not assert custody and control over the Device or its contents for any other purpose, including any requests made pursuant to the Freedom of Information Act, 5 u.s.c. § 552.

1) You have confirmed that the sole purposes of the search are: (1) to search for any .pst files, or .ost files, or compressed files containing .pst or .ost files, that were created by · Platte River Networks ("PRN"), after June l, 2014 and before February l, 2015, in response to requests for former Secretary Clinton's e-mail from her tenure as Secretary of State, (hereinafter the "PRN Files"), including in an intact but deleted form; (2) to attempt to identify any e-mails from, or remnants of, the PRN Files that could potentially be present on the Device; ·(3) to identify any e-mails resident on the Device sent to or received from the following e-mail accounts: [email protected]; hrodl [email protected]; [email protected]; and [email protected] (hereinafter the "Relevant Accounts"), for the period

-1-

HRC-2015 of January 21, 2009 through February 1, 2013 (hereinafter the "Relevant Period"); and (4) to conduct a forensic analysis of the device to determine whether the Device was subject to intrusions or otherwise compromised.

2) You have confirmed that Phase One of your search will proceed as follows: a. Your Tec~nical Team (to include FBI technical personnel only), will review the allocated space (i.e., active files) of the Device to search only for the PRN Files. Neither the Technical Team nor anyone else will review during Phase One the content of any .pst files, or .ost flies, or compressed files containing .pst or .ost files that can be identified as created before June 1, 2014 or after January 31, 2015. b. The Technical Team will review any files identified pursuant to subsection 2(a) above to determine whether they contain e-mails sent to or received from the Relevant Accounts during the Relevant Period. The files that d~ not include such e-mails will not be subject to any further review by anyone for any purpose, unless they meet the criteria identified in Phase Two or for purposes. of an intrusion analysis, both set forth below. · c. The PRN Files that include e-mails sent to, or received by, the Relevant Accounts during the Relevant Period will be provided to a Filter Team, which will be limited to two attorneys, one FBI agent, and one FBI analyst: none of whom are members of the investigative team.1 .d. The Filter Team will review the contents of any file they receive from the process described in subsection 2(c) to identify and remove: (1) any privileged material; and (2) any material they can determine is not an e-mail sent to, or received by, the Relevant Accounts during the Relevant Period. e. You will notify us of the results of Phase One of the search before proceeding to Phase Two of the search. f. You will proceed to Phase Two of your search only in the event that the PRN File containing approximately 62,000 emails from the former Secretary's clintonemail.com account is not identified in the allocated space of the Device.

3) You have confirmed that Phase Two of your search will proceed as follows: a. The Technical Team will search the Device, including the Device's unallocated space, to identify any e-mails, fragments of e-mails, files, or fragments of files: (1) that include e-mails sent to, or received by, the e-mail addresses [email protected] [email protected] during the Relevant Period or for which the date that the e-mail was sent or received cannot be determined; and (2) that include· e-mails sent to, or received by, the e-mail addresses [email protected] and [email protected] that

Should there be an extremely large volume of materials loc:ated on the Devic:e and provided to the Filter Team, we understand that the Department of Justic:e reserves the right to expand the number of Fiiter Team members in order to avoid significant delay in the review proc:ess. If such an expansion were necessary, the Department of Justice has agreed to inform us of this change.

HRC-2016 can clearly be identified as having been sent to, or received by, those accounts during the Relevant Period.2 Aside from the intrusion analysis described below, neither the Technical Team nor anyone else will search or review the Device for any other material or for any other purpose. b. The Technical Team will review the results of the foregoing searches for the purpose of removing any file or data that is not an e-mail or a fragment of an e-mail sent to, or received by, the Relevant Accounts dur.ing the Relevant Period. Aside from the intrusion analysis described below, such material will not be further reviewed by the Technical Team or anyone else for any other purpose. c. The remaining results of the search wili be provided to the Filter Team, which will review those results to identify and remove: (1) any privileged material; (2) any material that, upon further review, is determined not to be an e-mail sent to, or received by, th~ Relevant Accounts during the Relevant Period; and (3) any material that, upon further review, is d~termined not to be a work-related e-mail sent to, or received by, the e-mail account [email protected]. Aside from the intrusion analysis described below, such material will not be further reviewed by anyone for any purpose.

4) You have confirmed that you will also conduct a forensic analysis of the Device to determine whether the Device was subject to intrusions or otherwise compromised, without reviewing the content of any user created files, including .doc, .xis, .pdf, .jpeg, or e-mails not captured in the aforementioned searches.

As soon as the investigation is completed, and to the extent consistent with all FBI policies and applicable laws, including the Federal Records Act, the FBI will dispose of the Device and any printed or electronic materials resulting from your search. No part of this letter shall be read to imply the consent to retrieve from the Device any data other than the data described above or to conduct any search or review in any manner other than as described above.

Sincerely,

Beth A. Wilkinson

If a large volume of e-malls from the [email protected] and [email protected] accounts - for which a send or receive date cannot clearly be determined -- are located. we understand that the Department of Justice reserves the right to discuss further with counsel any additional search efforts that could be undertaken to assess whether such e-mails were sent or received during the Relevant Period. The Department of Justice will not undertake any such search without prior discussions with counsel and an agreement with counsel as to the scope of. and procedures to be used during, that additional search. -3-

HRC-2017 ALL !BI mroRMATIOH COHTA.IHED HEREIN IS TJNCLASSIF.IEC CA'l'E 12-01-201£ EY J76J18T80 NSICG

WILKINSON 1900 M SlllET, NW WWW.WlLKJNSONWALSH.COM SUITii BOO WALSH + WASHINGTON, DC ~0036 ESKOVITZ A LIMITED LIABILITY PARTNERSHIP

WASHINGTON, O.C. I LOS ANGELES

June 10, 2016

VIA Electronic Mail

b6 Per NSC b7C Per NSC U.S. Department of Justice National Security Division 950 Pennsylvania Avenue NW Washington, DC 20530

Dea~.___ _ b6 Per NSC b7C Per NSC

This letter provides consent, in connection with the Department of Justice's investigation into the use of a private server by former Secretary of State Hillary Clinton, to search the Dell Latitude E6330 (Serial Nol I (hereinafter "the Device") belonging to my client, Cheryl b6 Mills, who is Secretary Clinton's attorney, pursuant to the terms described below. The Device is b7C being provided to the Federal Bureau of Investigation ("FBI") solely for the purposes of this Department of Justice investigation, and for the Department's use in connection with the investigation. In voluntarily providing the De.vice, Cheryl Mills does not relinquish ownership or control over the Device, except for the FBl's limited investigative use as specified by this agreement. The FBI does not assert custody and control over the Device or its contents for anv other purpose, including any requests made pursuant to the Freedom of Information Act, S U.S.C. § 552.

1) You have confirmed that the sole purposes of the search are: (1) to search for any .pst files, or .ost files, or compressed files containing ,pst'or .ost files, that were created by Platte River Networks ("PRN"), after June 1, 2014 and before February l, 201S, in response to requests for former Secretary Clinton's e-mail from her tenure as secretary of State, (hereinafter the "PRN Files"), including in an intact but deleted form; (2) to attempt to identify any e-mails from, or remnants of, the PRN Files that could potentially be present on the Device; (3) to identify any e-mails resident on the Device sent to or received from the following e-mail accounts: [email protected]; [email protected]; [email protected]; and [email protected] (hereinafter the "Relevant Accounts"), for the period

-1-

HRC-6462 of January 21, 2009 through February 1, 2013 (her~inafter the "Relevant Period"); and (4) to conduct a forensic analysis of the device to determine whether the Device was subject to intrusions or otherwise compromised.

2) You have confirmed that Phase One of your search will proceed as follows: a. Your Technical Team (to include FBI technical personnel only), will review the allocated space (i.e., active files) of the Device to search only for the PRN Files. Neither the Technical Team nor anyone else will review during Phase One the content of any .pst files, or .ost files, or compressed files containing .pst or .ost flies that c~n be identified as created before June 1, 2014 or after January 31, 2015. b. The Technical Team will review any files identified pursuant to subsection 2(a) above to determine whether they contain e-mails sent to or received from the Relevant Accounts during the Relevant Period. The files that do not include such e-mails will not be subject to any further review by anyone for any purpose, unless they meet the criteria identified in Phase Two or for purposes of an intrusion analysis, both set forth below. c. The PRN Files that include e-mails sent to, or received by, the Relevant Accounts during the Relevant Period will be provided to a Filter Team, which will be Ii mited to two attorneys, one FBI agent, and one FBI analyst, none of whom are members of the investigative team.1 d. The Filter Team will review the contents of any file they receive from the process described in subsection 2(c) to identify and remove: (1) any privileged material; and (2) any material they can determine is not an e-mail' sent to, or received by, the Relevant Accounts during the Relevant Period. e. You wi!I notify us of the results of Phase One of the search before proceeding to Phase Two of the search. f. You will proceed to Phase Two of your search only in the event that the PRN File containing approximately 62,000 emails from the former Secretary's clintonemail.com account is not identified in the allocated space of the Device.

3) You have confirmed that Phase Two of your search will proceed as follows: a. The Technical Team will search the Device, including the Device's unallocated space, to identify any e-mails, fragments of e-mails, files, or fragments of files: (1) that include e-mails sent to, or received by, the e-mail addresses [email protected] and [email protected] during the Relevant Period 'or for which the date that the e-mail was sent or received cannot be determined; and (2) that include e-mails sent to, or received by, the e-mail addresses [email protected] and [email protected] that

Should there be an extremely large volume of materials located on the Device and provided to the Filter Team, we understand that the Department ofJustice reserves the rig ht to expand the number of Filter Team members in order to avoid significant delay in the review process. If such an expansion were necessary, the Department of Justice has ag~eed to inform us of this change.

-2-

HRC-6463 can clearly be identified as having been sent to, or received by, those accounts during the Relevant Period.2 Aside from the intrusion analysis described below, neither the Technical ream nor anyone else will search or review the Device for any other material or for any other purpose. b. The Tec~nical Team will review the results of the foregoing searches for the purpose of removing any file or data that is not an e-mail or a fragment of ari e-mail sent to, or received by, the Relevant Accounts during the Relevant Period. Aside from the intrusion analysis described below, such material will not be further reviewed by the Technical Team or anyone else for any other purpose. c. The remaining results of the search will be provided to the Filter Team, which will review those results to identify and remove: (1) any privileged material; (2) any material that, upon further review, is determined not to be an e-mail sent to, or received by, the Relevant Accounts during the Relevant Period; and (3) any material that, upon further review, is determined not to be a work-related e-mail sent to, or received by, the e-mail account [email protected]. Aside from the intrusion analysis described below, such material will not be further reviewed by anyone for any purpose.

Sincerely,

Beth~'~ A. Wilkinson

If a large volume of e-mails from the hrlS@att. blackberry .net and hrlS@mycingular .blackberry. net accounts -- for which a send or receive date cannot clearly be determined - are located, we understand that the Department of Justice reserves the right to discuss further with counsel any additional search efforts that could be undertaken to assess whether such e-mails were sent or received during the Relevant Period. The Department of Justice will not undertake any such search without prior discussions with counsel and an agreement with counsel as to the scope of, and procedures to be used during, that addltlonal search. · -3-

HRC-6464